libtins - High-level, multiplatform C++ network packet sniffing and crafting library.

•    C++

---

libtins is a high-level, multiplatform C++ network packet sniffing and crafting library. Its main purpose is to provide the C++ developer an easy, efficient, platform and endianess-independent way to create tools which need to send, receive and manipulate specially crafted packets.

network packet-parsing packet-analyser packets sniffing pcap libpcap

ntopng - Web-based Traffic and Security Network Traffic Monitoring

•    Lua

---

ntopng is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site (http://www.ntop.org), we suggest you to start reading the doc/README.md file for learning how to compile and use ntopng.

ntopng realtime network sflow ipfix traffic-monitoring packet-analyser packet-processing netflow snmp ebpf docker kubernetes

scapy - Scapy: the Python-based interactive packet manipulation program & library

•    Python

---

Scapy is a powerful Python-based interactive packet manipulation program and library. It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, store or read them using pcap files, match requests and replies, and much more. It is designed to allow fast packet prototyping by using default values that work.

scapy python-modules network network-analysis network-visualization network-discovery python2 python3 python-2 python-3 pcap packet-capture packet-sniffer packet-analyser packet-analyzer packet-crafting security security-tools network-security

PcapPlusPlus - PcapPlusPlus is a multiplatform C++ network sniffing and packet parsing and crafting framework

•    C++

---

PcapPlusPlus is a multiplatform C++ network sniffing and packet parsing and crafting framework. PcapPlusPlus is meant to be lightweight, efficient and easy to use.

c-plus-plus pf-ring dpdk packet-parsing winpcap pcap-files pcap packet-processing cpp libpcap multiplatform mac-osx packet-analyser networking network-forensics network-tools tcp-reassembly packet-crafting

nfstream - NFStream: a Flexible Network Data Analysis Framework.

•    Python

---

NFStream is a Python framework providing fast, flexible, and expressive data structures designed to make working with online or offline network data both easy and intuitive. It aims to be the fundamental high-level building block for doing practical, real world network data analysis in Python. Additionally, it has the broader goal of becoming a common network data analytics framework for researchers providing data reproducibility across experiments. Binary installers for the latest released version are available on Pypi.

data-science machine-learning data-mining netflow pcap packet-analyser traffic-analysis artificial-intelligence cybersecurity network-monitoring data-analysis dataset-generation network-analysis packet-capture ndpi network-security deep-packet-inspection traffic-classification

NFStream - A Flexible Network Data Analysis Framework

•    Python

---

NFStream is a Python package providing fast, flexible, and expressive data structures designed to make working with online or offline network data both easy and intuitive. It aims to be the fundamental high-level building block for doing practical, real world network data analysis in Python. Additionally, it has the broader goal of becoming a common network data processing framework for researchers providing data reproducibility across experiments. NFStream extracts +90 flow features and can convert it directly to a pandas Dataframe or a CSV file.

data-science data-analysis data-mining network-analysis network-security network-monitoring cybersecurity machine-learning artificial-intelligence dataset-generation deep-packet-inspection netflow traffic-analysis traffic-classification pcap packet-capture packet-analyser ndpi

multidiff - Binary data diffing for multiple objects or streams of data

•    Python

---

It's purpose is to make machine friendly data easier to understand by humans that are looking at it. Specifically multidiff helps in viewing the differences within a large set of objects by doing diffs between relevant objects and displaying them in a sensible manner. This kind of visualization is handy when looking for patterns and structure in proprietary protocols or weird file formats. The obvious use-cases are reverse engineering and binary data analysis. At the core of multidiff is the python difflib library and multidiff wraps it in data providing mechanisms and visualization code. The visualization is the most important part of the project and everything else is just utilities to make it easier to feed data for the visualizer. At this time the tool can do basic format parsing such as hex decoding, hexdumping, and handling data as utf8 strings, as well as read from files, stdin, and sockets. Any preprocessing such as cropping, indenting, decompression, etc. will have be done by the user before the objects are provided to multidiff.

diff hexdump visualizer packet-analysis packet-analyzer packet-analyser diffing

packetgen - Ruby library to easily generate and capture network packets

•    Ruby

---

PacketGen provides simple ways to generate, send and capture network packets. PacketGen provides an interactive console: pgconsole.

capture-packets pcapng packet-analyser packet-generator

flower - TCP flow analyzer with sugar for A/D CTF

•    Javascript

---

Once everything has been started, flower should be accessible at the address of the machine that started it on port 3000. If you are going to use flower in a CTF, remember to set up the firewall in the most appropriate way, as the current implementation does not use other security techniques.

ctf sniffer attack-defense-ctf packet-analyser reactjs cyberchallenge material-design pcap-analyzer flow

ChiChew - :notebook_with_decorative_cover: 教育部《重編國語辭典修訂本》 網路爬蟲 :: A live web crawler for the Chinese-Chinese dictionary published by the Ministry of Education in Taiwan

•    Python

---

教育部《重編國語辭典修訂本》 網路爬蟲 (即時資料查詢) A live web crawler for the Chinese-Chinese dictionary published by the Ministry of Education in Taiwan.

web-scraping packet-analyser web-crawler dictionary chinese taiwan

cuishark - A protocol analyzer like a wireshark on CUI

•    Go

---

This is cuishark's versin 2.0 prototype. The old version of cuishark was fullscrached and not using wireshark's dissector. This verison can use the wireshark's dissector with cuishark's Rich UI. You can analize many-many protocol's using JUST-CUI!!!. Packet makes us very happy. here is demo video (https://youtu.be/k0NGnIyZrqk). This software is developing under the GPL2.

packet-analyser packet-capture wireshark cui tui protocol-analyzer pcap ncurses

probeSniffer - 🔍 A tool for sniffing unencrypted wireless probe requests from devices.

•    Python

---

I'm not responsible for anything you do with this program, so please only use it for good and educational purposes.

wifi wireless sniffer packet-analyser probe-requests

WIre - Packet Analysis written in pure Crystal

•    Crystal

---

You will need to have are shards to be installed however you should just be able to download the binary if on x86_64 from the bin/ directory.

packet-analyser packet-capture sniffer pcap pcap-files

zk-sniffer - sniffer and parse zookeeper packet

•    Go

---

sniffer and parse zookeeper packet

traffic sniffer packet-analyser zookeeper packet-capture